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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions^ and listings, of claims in the 

application* 

WHAT IS CLAIMED IS ; 

1. (Original) A method of upgrading application solhvare on a fault tolerant 
system having a first engine and a second engine, the first and second engine executing 
an application, fhe method comprising: 

taking the second engine out of service; 
upgrading die application on fhe second engine; 

assigning the second engine as a standby engine to the first engine and receiving 
run state updates fiiom the first ragine; 

assigning the first engine as the standby engine to the second engine and receiving 
run state updates from the second engine; and 

upgrading the application on the first engine. 

2. (Original) The method of claim 1, wherein said i^grading the application on 
the second engine comprises disabling new features of the upgraded application. 

3. (Original) The mefliod of claim 1, wherein said upgrading the application on 
the first engine comprises disabling new features of the upgraded apphcation. 

4. (Original) The method of claim 1, fiirther comprising enabling new 
application features on the first and second engine. 
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5. (Original) The method of claim 1, wherein said assigning the first engine as a 

standby to the second engine comprises determining if the upgraded software is 

acceptable. 

6* (Original) The method ofclaim5« wherein ifsaid upgraded software is not 
acceptable^ assigning the first engine as an active engine. 

7. (Original) The method of claim 5, wherein if said upgraded software is 
acceptable^ taking the first engine out of service. 

8. (Original) The method of claim 1^ wherein the application comprises at least 
one work unit 

9. (Original) The method of daim 8» wherein the run state updates con4)rise a 
description of the at least one work unit. 

10. (Original) The method of claim 8, wherein said first engine and second 
engine operate in synchronization* 

1 1 . (Original) A method for upgrading application software on a fault tolerant 
system having an active engine and a standby engine, said method comprising: 

determining if said active engine and said standby engine are executmg different 
versions of said application software; 
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sending a description of work units from the active engine to the standby engine; 

and 

sending database activities from the active engine to the standby engine. 

12. (Original) The method of claim 1 1, further comprising: 
registering die work units at the standby engine. 

1 3. (Original) The method of claim 1 1 » further comprising: 

sending a step-up signal from the active engine to the standby engine with the 
description of work units. 

14. (Original) The method of claim 1 1 , \s^erein the application software 
comprises the work units. 

15. (Original) A fault tolerant system comprising: 
a first engine; 

a second engine; 

a computer readable memory that stores instructions that when executed by said 
first and second engine cause the fault tol^ant system to: 

designate said first engine as an active engine and said second engine as a standby 

engine; 

determine if said active engine and said standby engine are executing different 
versions of an application software; 
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send a description of work units fix>in said active engine to said standby engine; 

and 

send database activities from said active engine to said standby engine. 

16. (Original) The system of claim 1 5, said instructions further caiising said first 
and second engine to: 

register tiie work units at the standby engine. 

17. (Original) The system of claim IS, said instructions furdier causing said first 
and secotxd engine to: 

send a step-up signal fiom the active engine to the standby engine with the 
description of work units. 

18. (Original) The system of claim 15, wherein the application software 
comprises the work units. 
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